SWFMill base64_encode heap-based overflow

Summaryinfo

A vulnerability described as critical has been identified in SWFMill. The impacted element is the function base64_encode. Executing a manipulation can lead to heap-based overflow. The identification of this vulnerability is CVE-2022-36144. The attack may be launched remotely. There is no exploit available.

Detailsinfo

A vulnerability has been found in SWFMill (unknown version) and classified as critical. This vulnerability affects the function base64_encode. The manipulation with an unknown input leads to a heap-based overflow vulnerability. The CWE definition for the vulnerability is CWE-122. A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via base64_encode.

The weakness was shared 08/17/2022 as 63. The advisory is available at github.com. This vulnerability was named CVE-2022-36144 since 07/18/2022. Successful exploitation requires user interaction by the victim. Technical details are known, but there is no available exploit. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment (estimation calculated on 08/17/2022).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Name

• SWFMill

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion